Orbia Dramatically Improves Both Security and Efficiency of Global IT, OT, and IoT Networks

For the past four years, Bergamini has worked to reduce those risks by securing the corporate network, endpoints, cloud services, and operational technology (OT) and Internet of Things (IoT) equipment. “We protect technologies across many different businesses,” he says. “We have a lot of facilities implementing digital manufacturing solutions, and over the years, as we grew through acquisitions and mergers, aspects of our security architecture became a bit fragmented. We needed a more standardized and seamless way to secure those systems.”

When Orbia began evaluating options for deploying global and centrally managed security, Netskope stood out. Decision-makers were concerned that the complexity of integrating new security tools with the company’s existing infrastructure—including SD-WAN, identity management, privileged access management, and observability platforms—might hinder the company’s ability to gain a comprehensive view of internet traffic and access patterns. However, Netskope One secure access service edge (SASE) integrates well with Orbia’s existing technologies, which meant a Netskope solution would eliminate the chance of visibility gaps for internet traffic originating from different locations.

“With Netskope, we saw the opportunity to consolidate technologies across our business groups,” says Andrea Foppiani, Senior Manager, Global IT Infrastructure and Cloud Security for Orbia. “Netskope offered us the ability to bring secure web gateway [SWG], zero trust network access (ZTNA), identity and access management, and other functionalities under a common pane of glass, enabling us to better detect, understand, and respond to cyber threats.”

Now, Orbia users access both cloud-based and on-premises applications and devices through Netskope One SSE. The Next Gen SWG protects end-users, while the CASB lets the security team control the egress of data, regardless of users’ physical location.

Having all these capabilities in one solution enabled Orbia to dramatically reduce the security solutions in place companywide. Licensing costs fell so much that the Netskope infrastructure paid for itself within the first year. The security team is more efficient because they have fewer solutions to manage, and the organization has seen no reduction in IT or OT network performance.

“Netskope provides fast access to resources for all our global users, while also providing security at the edge,” Foppiani says. “Netskope also coexists seamlessly with our existing IT investments, like pairing Netskope SSE with our existing SD-WAN, which will allow us to embrace a dual-vendor approach to SASE. The combination of security and performance makes Netskope the right partner for us.”

Meanwhile, the security team uses Netskope One CASB and Advanced Analytics to monitor user behavior. For example, knowledge of how users are utilizing generative AI informs policy changes and enhancements to end-user education, as needed.

Now that it has secured outbound traffic, Orbia has begun leveraging Netskope One Private Access for zero trust network access (ZTNA) capabilities. “Zero trust is a buzzword, but it’s also a powerful concept,” Bergamini says. “Our legacy solutions allow remote access into our network for use cases from developers to partners to vendors. We want to provide each user with access to only the necessary resources. This would help us contain any cyber incident by restricting what a threat actor can do, even if it accesses one of our internal systems.”

He also expects the ZTNA rollout to help Orbia further consolidate its security landscape. “Netskope will continue to impact our operational costs and capital investments,” Bergamini concludes. “Plus, the ease of use, productivity, and simplification of security oversight are helping Orbia deliver on our mission of advancing life around the world through technology.”